Privacy Policy

Last updated: 6/9/2025

Our Privacy Commitment

  • No Long-Term Data Storage: We only retain your data for as long as necessary to provide services
  • No Data Selling or Sharing: We never sell, trade, or share your personal information with third parties
  • No AI Training: We do not use your data to train our AI models or improve our systems
  • Minimal Data Collection: We only collect data essential for service delivery

1. Introduction

At r7ai ("we," "us," or "our"), we are committed to protecting your privacy and complying with all applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other international privacy regulations. This Privacy Policy explains our minimal data collection practices and your rights.

2. Information We Collect

Minimal Personal Information

We practice data minimization and only collect information necessary to provide our services:

  • Name and business email address (for communication purposes only)
  • Company name (to understand your business context)
  • Project requirements (to provide appropriate solutions)

Technical Information

We collect minimal technical data for security and functionality:

  • IP address (for security and geographic compliance)
  • Browser type (for compatibility purposes)
  • No cookies except essential session cookies
  • No tracking or analytics that identify individuals

3. How We Use Your Information

We use your information strictly for:

  • Responding to your inquiries and providing requested services
  • Fulfilling our contractual obligations to you
  • Complying with legal requirements
  • We explicitly DO NOT use your data for:
    • Training or improving our AI models
    • Creating user profiles or behavioral analysis
    • Marketing without explicit consent
    • Any purpose beyond direct service delivery

4. Data Retention

We do not store your data long-term. Our data retention policy:

  • Contact form submissions: Deleted within 90 days after initial response
  • Project data: Deleted within 30 days after project completion
  • Communication records: Retained only as required by law (typically 1 year)
  • No permanent storage of personal information

5. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit and at rest
  • Access controls and authentication
  • Regular security audits and updates
  • Immediate data deletion protocols

6. No Data Sharing

We never sell, trade, rent, or share your personal information. The only exceptions are:

  • When required by law or valid legal process
  • To protect our rights or safety in emergency situations
  • With your explicit written consent

7. Your Rights (GDPR, CCPA, and Global)

Regardless of your location, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate personal data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to data processing
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right to Lodge a Complaint: File a complaint with supervisory authorities

8. International Data Transfers

We process data in accordance with local laws. If data must be transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Updates to This Policy

We may update this policy to reflect changes in law or our practices. We will notify you of material changes via email or website notice at least 30 days before they take effect.

11. Contact Information

For privacy-related inquiries or to exercise your rights:

Email: connect@r7ai.com

We respond to all privacy requests within 30 days as required by law.

Legal Basis for Processing (GDPR)

We process personal data based on: (1) Consent - when you submit a contact form, (2) Legitimate Interests - to provide requested services, (3) Legal Obligations - to comply with applicable laws.